Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
File: agyGfJeYccetsJ98Yhm6WwZFkxw.mft (raw, json)
Hash identifier: L26utVdJQ8r1J3vjKghcDVvODMUtFB2NuG/mopUrkto=
Subject key identifier: 8A:2F:6C:A2:CE:AA:06:2D:97:13:00:2A:FB:AA:B1:7D:68:34:DF:BE
Authority key identifier: 6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
Certificate issuer: /CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Certificate serial: 01A06C83105D7EF7F2AA8B20599BCAD31179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
Manifest number: 11EF
Signing time: Fri 04 Sep 2026 13:02:03 +0000
Manifest this update: Fri 04 Sep 2026 13:02:03 +0000
Manifest next update: Sat 05 Sep 2026 13:02:03 +0000
Files and hashes: 1: VI3zjeHZdDu0ypEH0uILb9Lb4YA.roa (hash: i7eNNz6Wv21ngloC0Wp7tGBt5qo7AjOzv44UBAKSHF0=)
2: agyGfJeYccetsJ98Yhm6WwZFkxw.crl (hash: wVvLzppvsCLDJpa6tV/Ss00WYKBMNQwosVsrT6AukIk=)
3: peSkqWCqswhUNJGM0RGGvifGjM4.roa (hash: dUUdnXPhtGozYsTQ/nVdXfCGkdsE7fr6bznqx68dgNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 13:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:83:10:5d:7e:f7:f2:aa:8b:20:59:9b:ca:d3:11:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Validity
Not Before: Sep 4 13:02:03 2026 GMT
Not After : Sep 5 13:02:03 2026 GMT
Subject: CN=8a2f6ca2ceaa062d9713002afbaab17d6834dfbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:58:80:31:b4:ae:61:4f:1b:8a:4e:a9:6a:a2:
65:51:ee:6e:2a:7a:06:d2:ea:5c:a6:09:3c:69:e6:
2e:4b:1c:a9:3b:a4:11:05:e4:0c:3b:0e:34:f2:55:
80:d4:9a:e9:01:30:87:a9:bd:ea:98:12:cc:f0:e4:
ed:9b:50:11:ff:c2:18:55:ae:55:85:e4:a4:6f:4b:
95:99:d0:20:ac:a4:bc:b9:70:6f:be:d7:d1:48:1e:
ad:52:10:2d:54:fe:67:08:5c:6f:37:e3:59:b2:a9:
5b:a0:78:50:fe:aa:bf:4d:20:3b:b5:46:b0:4d:ce:
0a:bd:38:ec:c1:a6:42:67:a5:00:e5:52:37:e6:04:
57:03:04:46:36:29:68:ff:14:50:2a:f3:a6:d2:58:
bf:43:90:c0:da:4c:08:b5:c3:7c:e6:e4:88:58:cf:
39:1e:b9:56:56:94:e7:1e:b9:2e:28:56:f4:38:69:
f9:cc:a3:57:64:d0:48:7f:cf:22:31:45:15:1a:1d:
21:63:7e:17:24:f4:05:94:78:8f:01:f9:74:df:1c:
d9:61:49:5e:a5:79:bd:81:e4:7f:42:1c:b1:da:a9:
0e:b8:b9:a2:0f:23:eb:80:a8:35:c5:a6:aa:8e:03:
61:a0:1f:c7:95:31:cc:f6:d4:96:7d:8b:9c:a6:9d:
2e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2F:6C:A2:CE:AA:06:2D:97:13:00:2A:FB:AA:B1:7D:68:34:DF:BE
X509v3 Authority Key Identifier:
keyid:6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e3:94:24:b8:3c:0b:32:70:84:46:b0:79:6c:a7:92:76:71:
be:c4:31:31:6d:bf:29:fd:b2:06:96:07:71:fa:07:56:81:22:
5c:8a:86:81:11:aa:03:d1:bb:08:66:ee:36:f2:af:9d:00:c7:
85:f1:2f:9c:70:a5:ee:12:8a:64:52:5a:47:67:61:1a:f6:93:
8f:20:e7:b4:33:cd:29:19:63:d6:96:25:96:ab:02:4e:5d:83:
3a:97:fc:3a:9b:82:80:3d:03:36:45:d1:76:e3:04:50:cb:55:
1a:66:59:a9:85:72:1c:12:60:a9:22:83:93:0b:ad:e4:6f:25:
a0:1b:85:26:0f:83:82:d3:b8:b9:ea:40:6f:ed:bc:7b:4c:66:
bb:ca:a1:dd:d6:0d:d0:94:37:5b:76:02:03:8a:5b:8a:e7:3c:
ed:50:58:5f:ff:23:ea:18:df:45:0e:a6:7b:84:aa:a8:44:b0:
f6:9b:63:e6:df:73:c5:e6:e9:ec:88:8b:b5:be:79:d0:4c:4d:
b5:6c:8e:3a:a9:c6:9c:77:77:98:bf:4e:b3:c6:9e:52:4c:c9:
a5:88:8b:2d:25:a9:0f:f0:7f:d1:46:8a:ce:5d:d1:2c:89:1b:
4c:dc:63:61:9b:58:cc:0c:87:73:3e:99:2a:f5:26:48:26:fa:
1d:07:2e:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBsgxBdfvfyqosgWZvK0xF5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMGM4NjdjOTc5ODcxYzdhZGIwOWY3YzYyMTliYTViMDY0
NTkzMWMwHhcNMjYwOTA0MTMwMjAzWhcNMjYwOTA1MTMwMjAzWjAzMTEwLwYDVQQD
Eyg4YTJmNmNhMmNlYWEwNjJkOTcxMzAwMmFmYmFhYjE3ZDY4MzRkZmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ViAMbSuYU8bik6paqJlUe5uKnoG
0upcpgk8aeYuSxypO6QRBeQMOw408lWA1JrpATCHqb3qmBLM8OTtm1AR/8IYVa5V
heSkb0uVmdAgrKS8uXBvvtfRSB6tUhAtVP5nCFxvN+NZsqlboHhQ/qq/TSA7tUaw
Tc4KvTjswaZCZ6UA5VI35gRXAwRGNilo/xRQKvOm0li/Q5DA2kwItcN85uSIWM85
HrlWVpTnHrkuKFb0OGn5zKNXZNBIf88iMUUVGh0hY34XJPQFlHiPAfl03xzZYUle
pXm9geR/Qhyx2qkOuLmiDyPrgKg1xaaqjgNhoB/HlTHM9tSWfYucpp0u1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIovbKLOqgYtlxMAKvuqsX1oNN++MB8GA1UdIwQY
MBaAFGoMhnyXmHHHrbCffGIZulsGRZMcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWd5R2ZKZVljY2V0c0o5OFlobTZXd1pGa3h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8xZTAxZDItMWExZC00ZGMxLWE4ZDUt
ZTQ1ODYzZWFjMmI0LzEvYWd5R2ZKZVljY2V0c0o5OFlobTZXd1pGa3h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8xZTAxZDItMWExZC00ZGMxLWE4ZDUtZTQ1ODYzZWFjMmI0
LzEvYWd5R2ZKZVljY2V0c0o5OFlobTZXd1pGa3h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaOOUJLg8
CzJwhEaweWynknZxvsQxMW2/Kf2yBpYHcfoHVoEiXIqGgRGqA9G7CGbuNvKvnQDH
hfEvnHCl7hKKZFJaR2dhGvaTjyDntDPNKRlj1pYllqsCTl2DOpf8OpuCgD0DNkXR
duMEUMtVGmZZqYVyHBJgqSKDkwut5G8loBuFJg+DgtO4uepAb+28e0xmu8qh3dYN
0JQ3W3YCA4pbiuc87VBYX/8j6hjfRQ6me4SqqESw9ptj5t9zxebp7IiLtb550ExN
tWyOOqnGnHd3mL9Os8aeUkzJpYiLLSWpD/B/0UaKzl3RLIkbTNxjYZtYzAyHcz6Z
KvUmSCb6HQcu9Q==
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:40:22 2026 by rpki-client